Investigators have identified hundreds of suspected criminals operating behind anonymous online accounts following an international effort to dismantle drug trafficking networks across the dark web. The operation resulted in 354 arrests and the confiscation of substantial quantities of illegal drugs, firearms, cash, and cryptocurrency.
Known as Operation TorNado, the investigation involved law enforcement agencies from 14 countries and continued from May 2025 through October 2026. Europol coordinated international cooperation, helping national authorities exchange intelligence, examine digital evidence, and connect online identities to suspected offenders.
Rather than focusing exclusively on shutting down websites, investigators pursued individuals associated with five previously disrupted marketplaces: Archetyp, Bohemia, Nemesis, Kingdom, and Tor2Door. The operation also examined suspected criminal activity involving encrypted messaging platforms, underground forums, and independent online drug stores.
The largest number of arrests occurred in the United States, where authorities detained 132 suspects. The United Kingdom recorded 59 arrests, followed by Hungary with 45, Germany with 41, and France with 23. Additional arrests took place in New Zealand, the Netherlands, Slovenia, Austria, Ireland, Czechia, Australia, and Finland.
Authorities conducted hundreds of searches during the operation. European investigators recovered approximately 950 kilograms of illegal drugs, including amphetamines, cocaine, ketamine, MDMA, cannabis, and psilocybin mushrooms. They also confiscated 57 firearms and more than €60 million in cash and cryptocurrency.
In the United States, seizures exceeded 4.8 metric tonnes of drugs, alongside 152 firearms and more than €150 million in financial assets. Combined international seizures amounted to more than 5.7 tonnes of drugs and over €210 million in cash and digital currencies.
Digital forensics and financial investigations played an important role in identifying suspects. Europol provided blockchain analysis, cross-referenced intelligence from participating countries, and deployed specialists to support investigations in Czechia and Slovenia.
American authorities said information obtained during previous marketplace takedowns helped investigators identify suspected traffickers and develop separate investigations. The operation built on earlier international enforcement efforts, including Operation RapTor in 2025, which resulted in 270 arrests.
Despite the extensive seizures, European investigators cautioned that dark web criminal networks continue adapting to enforcement actions. Authorities have observed marketplaces becoming increasingly specialized, while vendors move between platforms and encrypted communication services after disruptions.
Operation TorNado therefore extended beyond the closure of individual marketplaces, targeting the people and financial transactions supporting illegal online commerce. Europol identified the rapid replacement of disrupted markets and migration to alternative platforms as continuing challenges for international investigators.